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ALL IHFOmiATIOH C OHTAIHED 

HEREIN 15 UNCLASSIFIED 

DATE 04-27-2011 BY 60324 uc toaw sab /ml 


IN 

DATE : 07-09-94*TIME : 1 8 : 26* 

MATCHED QN:*L/N*F/N* MI*B/5 
’ DMV RECORD FOR LAW ENFORCEMENT USE ONLY 
DL/NO : C5943904%B/D : 1 1 -27-59*NAME : HEINZ ERIC EDWIN JR% 

RES/ADDR: AS OF 01-10-92:3640 S SEPULVEDA 107 W LOS ANGELES 90034% 
QTH/ADDR AS OF 04-22-87:10733 RIVERSIDE DR N HOLLYWOOD % 

AKA: PETERSEN JUSTIN TANNER* 

IDENTIFYING INFORMATION: 

SEX : MALE%HAIR : BROWN%EYES : BRN*HT : 6-00%WT : 1 45% 

ID CARD MLD : 01 -29-88%EXP/BD : 93%BATES; 267% 

LIC/ISS : 1 0-08-85%EXP/BD : 88%CLASS : 3 
& Ml MOTORCYCLE* 

LATEST APP: 

DL. TYPE : ID CARD*ISS/DATE : 1 2-30-87%0FFICE : GLN% 

RESTR: CLASS C/3 DRIVING LIMITED TO VEHICLE WITH AUTOMATIC TRANSMISSION , 
LICENSE STATUS: 


EXPIRED* 

DEPARTMENTAL ACTIONS: 

NONE 

CONVICTIONS: 

NONE 

FAILURES TO APPEAR: 

NONE 

ACCIDENTS: 

NONE 

END 

OUTPUT MSG 902, FROM CLIO FOR FBI4 


07/09/94 



IN 

DATE: 07/09/94 TIME: 18:26 
HATCHED ON: #L/N#F/N 

NAME : PETERSEN JUSTIN ADD: 374 CTY : SAN DIEGO 
VR#; 1 1 C5322 FC:M YR:86 Ml< : HD 
NAME: PETERSEN JUSTIN A ADD: 200 CTY; CHICO 
* VR# : 3HBD693 FC:A YR;84 MK : CHEV 
NAME: PETERSEN JUSTIN J ADD: 235 CTY: RAMONA 
VRv : 2M1 4081 FC : C YR:85 MI<:MITS 
VR# : 4H22400 FC;C YR:85 MI<:TOYT 
AN I END 


OUTPUT MSG 903, 


FROM CL20 FOR FBI4 


07/09/94 18:27 


IN 

DATE : 07/09/94 TIME: 18:27 
MATCHED ON: *L/N*F/N* MI 
NAME: HEINZ ERIC E ADD: 170 CTY : SAN RAFAEL 
VR# : 1 CWA851 FC:A YR:81 Ml<: VOLVO 
VR# : J496992 FC:S YR--35 MK : DP 
AN I END 

OUTPUT MSG 904 , 


FROM CLIO FOR FBI 4 


07/09/94 18:27 
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workedundercoyer for theFBI' lndexin °: 

while awaiting sentencing for 

crimes that include rigging radio 

station contests. Case sheds light 

on shadowy computer world. 


By JOHN JOHNSON.', s • ,* - 

TIMES STAFF WRITER '* 

* #- - 

' He called himself . Agent Steal, computer, 
hacker. He was a slender, good-looking 
rogue partial to Borsches and BMWs who,' • 
bragged' that he worked undercover for the- 
FBI catching other hackers. . * 1 
^But today Agent Steal, whose real name:, 
is Justin Tanner Petersen, is on the. run 
from the very agency *he 'told 'friends- was 
paying his rent, and' flying him io computer 
conferences to spy on the hacking commu-. 
nity, : > 

Petersen, 34, a Westside resident, disap-, ; 
peared in October after admitting to federal 
prosecutors that he. had been committing; 
further crimes during the time he claimed''" 
to be working with the government “in the »• 
investigation of other /persons,”' according- 
to federal court records. , ’ ' , 

His story is a’ microcosmic slice of the 
close-knit' and ruggedly- competitive world , 
of computer hacking, where, friends strug- 
gle to outdo ^each lOther and then, when: ► 
they’re caught, sometimes turn 'on each - 
other. * . .,V , , - \ ■ ,*/ 

Authorities say Petersen’s' list' of accom- ' : 
plishmehts, ; skhown as- “hacks," includes ^ 
breaking into, computers used by federal; 
investigate agencies and- tapping into a : 

- credit. card information bureau. 

Petersen, who 'once promoted after- ■ 
hours .rock shows, in the - San Fernando 1 
Valley, was involved in the hacker under- - 
ground’s, most -sensational -scaim: hijacking 
phone'-, lines at Los ..Angeles 5 radiorstation , 
KPWR-FM to win. contests with 'prizes * 
ranging from new cars to trips to Hawaii., • 
The mastermind of that scheme was Anoth- 
er hacker; . Kevin : 'Poulseri, a.k.a. Dark , 
Dante. Poulsen is .- awaiting sentencing , in* 
connection with the case,' having already' 

• - Please see HACKER, B4^ 
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iH ^ACKER ; 


- Continued from Bi- • •“* . ' *”. 

.« spent three -years, in:, custody; .the,' 
i longest- term in jailfor-any hacker- 
i; in history. ',V. • >' >V 

Petersen has boasted ;that he 
j. trapped former colleagues^ Last 
» yearhe gave pri. interview^ to 'an 
[ on-line publication called Phrack in 
* which, he claimed'to''Have tapped * 
the phone of \ prostitute 'working 
for alleged madam Heidi ; Fleiss. ; He 
'••'also bragged of working- with; thjj 
FBI to bust another infamous hack- 
er, Kevin Mitnick, a SanFernando 
' Valley "man who has been hiding for • 
v almost two years to avoid prosecU- 
. Uon for allegedly Hacking into .cdm- 
,'puters illegally and posing as a law 
’ enforcement officer. . , 1 

“When I went to. work for the 
bureau I contacted ’Mitnick, 'V’Bet. 
„tqrseri said ;in- the ‘Phrack^inter-I 
}yie'w. “He - was, still up to' his old 

• .vtricks, . so;' we/opened .a.-'case. oh 

• ..him, . . . i- What a. loser. Everyone 

thinks he is some, great, hacker. ,1 . a 
' outsmarted him arid busted him.’.' 


’•‘TV yf lich of; Petersen's story /may 
.h- J^yJL be ‘ bunk: He 1 ' is/, after ^all, ‘a v 
|“'shddowy person’ who didn’t; even. 

■ VI use his own name during .the years, 

| jliplspent on'the, fringes.of the. Los'-* 
.-Angeles ' rock scene x Longhaired 
^iEric Heinz, as Petersen called him- < 
'-Vself;, shattered the- computer ? nerd'- 
.^stereotype.-'He'.frequented -the- 
j;; Rainbow- Bari and 'Grills on’ Sunset 
VI Boulevard, > of ten' with - different 
r women otvhis arm,- and handedbut 
KI cards identifying himself as.a con- 
Vlcdrt promoterand .'electronic fsur- 

*‘veillance specialist.-, - . * 

(V . VThe FBI; refused- to tajk; about 
VJPpterseri directly.But J.> Michael , 
Z- Gibbons, a bureau computer crime- 
, “I expert,-; said .-hie doubted-Petersen 
was working - ‘as a .government,; 

■ ;.*f informant ; to VerisnareVhis; hackeri 
'^•buddies for the bureau"; * • 
•^.-V'.That kind of relationship is : dan - 
»v gerous'.- for; the FBI, .Gibbons said; I 

. V* “Across the' board,- hackers, cannot- 
’ ’^be trusted to work— they play both < 
i? sides', against ‘the ■ ;middle.’,’; .The." 
^agents “cbuld-havehad-hirii in.the 
•Vt office,” Gibbons said. : -'5They. prob- > 
Jr ably; debriefed hirii at length - .' [But]: 
(5 send him out to do things^P doubt' a‘ 

- k; itr ' > r*»: .. >.-*v 


^•■'•>Hdwever, .'attorney, ..Richard 
, , Sherman iof Santa; Monica; who 
w represen toanotherihacker, has ac-’ 

, cused the.bFBI-. of actively- using 

• ..—Petersen as an informant and turn- 
£f»ng a < blind Veyel, to : Petersen's al- " 

leged .credit card frauddurihg the 
43 time he was in the bureau's care. . 

,v; : I.In .a , May/19 ’letter; to’ Atty.- Gen. 
-^Janet Reno, Sherman- said ■■ three ; 
sVagents in Los -Angeles erigaged "in , 
j^albourse of bonduct which is illegal 
-wand, contrary to Bureau policy" in/, 

* ^handling Petersen;, V/; 

Ann jarring tori, deputy chief.'. 
■i;;of;.'the Justice.Department’s public 
«;in^grity section, responded July 
-that, there were, no . grounds to 
^begin.a.crimirial’investigation. As- 

a. efoi'int TT C! . O-Li 11 



c .^factually,incorrect that.we allowed 
• ;VMr.- Peterseri to commit crimes.’,’ - 
,$£ • .1 .Those ’Who.- knew ' Peterseri best 
I '-^described him as a bright, verging- 
v^'on-;arrogant man who dressed well- 
ir .aqd^ometimes walked with a cane,. 
‘ ; ^^u^MoiC^otorcycle ^accident . 

,C* six years : ago; that - cost him afoot. 

' ,/ He -.sometimes prorrioted -after- 


, rV Eambnd said- Petersen orice.told 

> -hitijiV "The, difference betweeri you 

-.vandl'me 'is TCget a* thrill from 
\ breakingthe law.” ” , > 

X' ftT/the^ Phrack]' interview; pub- 
V- lished ori'the' Iriterriet', *ari interna-] 

> tional network- of "computer 'net- 
. I- works with-'millionsl .of users, 

Petersen , as’ Agent/Steal bragged . 
«- -i' about, breaking into' ‘Pacific, .-Bell - 
’ J; headquarters .with hacker Poulsen 
, :to obtain , information ; about- the 
;y .phone Company’s investigation ’of-' 
(-•Petersen’s hacking., , 

'■(viJPetersen^idthe 
, iriformation regardirig other, invest ' 

j ’tigatlons'i rind? how they, do .wire-- 


■i 


' h 


o 


o 


taps.” ' ' : ' : * ued 'Working;;for the government: 

•“Very dangerous' in 1 , the' wrong.- during - .that' ttme./Petersen's'pju't- 
hands," said Phrack’s' interviewer, • ner, ? Lamond,* /'said . Petersen./ told 

'-according to a transcript.-' j . Wm.the PBIJwas paying him $600 a 

*;“We, are. the wrohg‘hands,”;Pe->. month/ “to/dielp; therm track.dqwn/ 
tersensaid.* • " , • / / hackers.^ ; ', v ‘* . / /• ‘ ‘T ' 

* S -Petersen*?was- arrested' in. Texas On' Oc£'18, ,1993/15 months after- 

.in*-199r,‘. where he' 1 lived briefly.. . eritering^^S^st’fgiMty'ple^ 'Be-.,- 
Court-records; show-'that -author!-; - "tersen'wascbnfrdnted’outsidefedi 
ties' searching" his'apartment found eral.cpurt.by government' attorney 

computer ^equipmerit;- Pacific <Bell : Schindler," "who r asked /if "he had 

manuals arid five modems.^ -. r‘ : heeri committing an^crimes .while 

*. An, FBI affidayjt{-expressed;fear on bail.-, ^Petersen -'said"', he »~had, • 

.that Petersen - could'- have been according to Schindler. . '** 
eavesdropping on law/enforcement /.Petersen then- met briefly with 
investigations. The- affidavit .said his attorney arid took offATve got a 

Petersen adriiitted “conductirig il- big 'problem and I'm .splitting," he 
, legal telephone .taps” arid breaking :told a friend the same day. ;. 

into, Pacific ..Bell’s / COSMOS , com; /Attempts to reach Petersen were 

puter program, which/allows- the unsuccessful- and: his, attorney, 
user to check .telephone : numbers 'Morton Boren," ’ 'said heV has "no-- 
and determine the- location of Jtele- , .knowledge of s Justfh committing 
phone Unesarid circuits.- -any crimes."-;: /; y., i,‘\. 

' '-'A'grarid'jury in Texas returned . * Sherman alsocriticizesthegov- * 
ari eight- count ' indictment dgaipst.- •ern'mentfor allegedly allowing Pe/ 
.him, accusing^Petersen-of'.assumi . tersen/ while serving as an iriformr 
,ing;falseh^es/accessirig;a.^ 

puter wi£^i’ % au^o^»tion^; pos-,: “ v : ,Telephbne’{Cp?- computer'^called; 
-jsessirig;^:stoleril''^mai /Switched -Acces^ 

."frauduleritl^ob^nijig^an^j usingXX -- ^/SAS.,Sherman saidithe^omputj' 
credit cards.?- allows ^operators/., to intercept- 

.. ./The 'case'/ .;w"^ : /< transferred.-;^ ‘/telephone, cahs lahd^placef bther' 

• Californi^arid; sealed . putioffcorii-.,. calls; ; /making :.itjap^ 

cem/ for£lJeten3en'sXsafe^^^ .other phbries;^X5; 
motfon/tb'seal, /pbt^ried-riy/mtto'r'--,-,. RichMotta/executiye director of- 

riey "Sherman; states- that- Petersen^ reliability, and support' 

“acting' in/ an uridwroy^jca^cit^ v . *for iPacific Bell; ;saidj he '.wbrild noti 
currently/ is/ cooperating;' with/the'-. ^ . comment on Shermari's'ailegatipns"/, 
/United §taU».;lh^e^riy^U^^%v ' in;tiie'PHrack; int'eryie.w,T^eter-/ 
{of. other" persons !njCtoprafc^'?f ^ f-:seri''-msde* ! no > ’apoio'gies; for :hisy 
/Petersen {"eventually/ pleaded; .V choices in ;life.vDiscussing : ;Peter : / 
'.guilty to:sfc "cbunts.'includiri^ alleged role as/an informant, •/ 

.ging a radio, station- cpntest'with v a; . /interviewer Mike Bowen suj&ested : ’ 
".^20,(^.priTO./He'faced!a/^h^nceK V-tKat//most; hackers /would have: 
of up toV40 -{years-. irii jail/andVa/'vdone the'same'asyou.”' ’ ; * / 
.$r.5rmUlibri'fine, but v the' sentenc/ ? “Most" . hackers,’/ ' /Petersen; ,re r ’>' 
•ing- was j.coritiriue’d several ‘times. 1 / / plied,' “would have' sold' out.thejr;, 

Shermari believes Petersen’cbntirii> ; " mother." J . r *. ,r " " 

% v * 
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U.S. Department of Justice 



In Reply, Please Refer to 
File No. 


Federal Bureau of Investigation 


11000 Wilshire Blvd. #1700 
Los Angeles, CA 90024 
August 8, 1994 


Dear Proprietor: 

We are writing to you and other tanning salon 
proprietors in the Los Angeles area to ask for assistance in 
locating a fugitive suspect wanted by the FBI. 

The fugitive, Justin Tanner Petersen, pled guilty to 
six felony counts in 1993. While on bail awaiting sentencing, he 
engaged in further criminal activity and his bond was immediately 
revoked. Petersen is believed to frequent tanning salons in the 
.area. If you see Petersen, we ask that you do not confront him 
but rather call the FBI at (310) 477-6565, or your local police. 

Petersen is described as a white male, age 34, 6-foot, 
i45-pounds with long brown hair and dark features. He is an 
amputee who wears a prosthetic lower left leg and is known to use 
a cane . 


.the. 


We ask that you and your employees carefully examine 
enr.lnsefl nosier of Petersen. Yo u may call FBI Special Agent 


iter 
J at 


(direct dial) with full 


confidentiality about information concerning Petersen's 
whereabouts. We appreciate any assistance you can provide in this 
matter . 


Sincerely, 

CHARLIE J. PARSONS 
Special Agent in Charge 

T.nfi Ancfglgg FRT PipIH 

be 

b7C 

'MV - * 1 1 

Special Agent 

Los Angeles FBI Field Office 


SEARCHED 

INDEXED 

SERIALIZED. 

FILED 




'ZJ=~ 









All INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 
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U.S. Department of Justice 


Federal Bureau of Investigation 


In Reply, Please Refer to 
File No. 


11000 Wilshire Boulevard #1700 
Los Angeles, CA 90024 
August 10, 1994 


Dear Proprietor: 

We are writing to you and other prosthetic clinics in 
the Los Angeles area to ask for assistance in locating a fugitive 
suspect wanted by the Federal Bureau of Investigation (FBI) . 

The fugitive, Justin Tanner Petersen, pled guilty to 
six felony counts in 1993. While on bail awaiting sentencing, he 
engaged in further criminal activity and his bond was immediately 
revoked. Petersen is believed to visit prosthetic clinics for 
treatment in the area. If you see Petersen, we ask that you do 
not confront him but rather call the FBI at (310) 477-6565, or 
your local police. 

Petersen is described as a white male, age 34, 6 foot, 
145 pounds, with long brown hair and dark features. He is an 
amputee who wears a prosthetic lower left leg and is known to use 
a cane. 


We ask that you and your employees carefully examine 
the enclosed post er of Petersen . Y ou may call FBI Special Agent 

I at \ (direct dial) with full 

confidentiality about information concerning Petersen's 
whereabouts. We appreciate any assistance you can provide in 
this matter. 


Sincerely, 

CHARLIE J. PARSONS 
Special Agent in Charge 


be 

b7C 


Special Agent 
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(Mount dipping in Space Below) 


FBI Footwork 
Puts Computer 
Hacker in Jail 

By JOHN JOHNSON [ 

TIMES STAFF WRITER 

An.FBI agent caught one of the nation's 
most wanted computer hackers in a foot 
chase Monday morning in West Los Angel- 
es, where the fugitive was sighted about 
two blocks from the FBI's office after 
spending nearly a year on the run. 

Justin Tanner Petersen, who has claimed 
that he worked undercover helping the 
FBI track down other criminal hackers, 
had been sought by federal agents since he 
fled while awaiting sentencing on a convic- 
tion stemming from the hacker under- 
ground's most sensational scam —hijacking 
radio station phone lines in Southern 
California to win contests with prizes 
ranging from new cars to trips to Hawaii. 

Petersen also had pleaded guilty to 
tapping into the files of a credit card 
information bureau and transporting a 
Please see HACKER, B4 
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HACKER: Capture Follows Chase 


Continued from B1 
stolen car across state lines. 

A rangy, 34 -year-old whose , 
stylish clothing contrasted sharply 
with the stereotypical image of 
hackers as slovenly nerds, Peter- 
sen took the hacker moniker Agent 
Steal, using the name of an officer 
who once investigated him- 

Petersen, who faces up to 40 
years in prison and fines of up to 
$1.5 million, was caught after a 
short foot chase that began outside 
an apartment building where an 
agent saw him getting out of a 
BMW, just blocks from the FBI’s 
Westwood offices. 

"It was superb police work by 
some very dedicated agents," said 
Assistant U.S. Atty. David Schin- 
dler, who would not reveal any 
other details of the capture. 

Wearing open sandals, with dark 
hair down the middle of his back, 
Petersen appeared briefly before 
U.S. District Judge Stephen V. 
Wilson, who declined to set bail 
and scheduled sentencing Oct. 31. 

Sentencing on the charges had 
been delayed several times while 
Petersen apparently cooperated 
behind the scenes— but never qui- 
etly— with the government’s in- 
vestigation of computer hacking. 

Petersen told friends that the 
FBI was paying his rent and flying 
him to computer conferences to 
spy on other hackers. He gave an 
interview last year to an on-line 
publication called Phrack in which 
he claimed to' have tapped the 
phone of Heidi Flciss, the alleged 
"Hollywood madam." He did not 
say why. 

He also bragged of helping the 


FBI in their efforts to bust another 
hacker, Kevin Mitnick, the FBI’S 
most wanted hacker suspect. 

"When I went to work for the 
bureau I contacted" Mitnick, Pe- 
tersen said in that interview. “He 
was still up to his old tricks, so we 
opened a case on him. . . . What a 
loser. Everyone thinks he is some 
greaj. hacker. I outsmarted him and 
busted him.” 

Government agencies never 
have confirmed that they used 
Petersen as an s active agent. The 
closest they have come is a refer- 
ence in a federal court document 
that said Petersen, “acting in an 
undercover capacity, currently is 
cooperating with the United States 
in the investigation of other per- 
sons in California." 

However close the relationship, 
it came to an end Oct. 22, 1993, 
when Petersen was confronted 
outside federal court and asked if 
he had been committing more 
crimes while awaiting sentencing 
on his other charges. Schindler said 
Petersen admitted he had. 

After meeting briefly with his 
attorney, Petersen took off. 'T’ve 
got a big problem and I’m split- 
ting,” a friend said Petersen told 
him the same day. > 

Petersen's attorney, Morton Bor- 
en, said he visited Petersen for a 
short time Monday at the Metro- 
politan Detention Center, where 
federal prisoners are held in Down- 
town Los Angeles., “He was de- 
pressed and worried," Boren said. 

While he was on the run, friends 
continued to hear from him, and 
some said he never strayed far 
from his old Westside haunts. A 


well-known figure on the night- 
club scene who operated after- 
hours clubs in Hollywood and the 
San Fernando Valley, he had a 
reputation as a sharp dresser and 
ladies’ man who sometimes carried 
a cane. He lost part of one leg in a 
motorcycle accident. 

Schindler declined to say wheth- 
er new charges will be filed against 
Petersen. At the time of his arrest, 
Petersen was carrying false identi- 
fication, Schindler said. 

C oincidentally, the alleged mas- 
termind of the radio station 
contest scheme, Kevin Poulsen, 
who used the hacker nickname 
Dark Dante, was appearing in fed- 
eral court. Monday almost at the 
same time that Petersen was 
brought in. Schindler asked that a 
sealed plea agreement— in which 
Poulsen admitted computer fraud, 
obstruction of justice and money - 
laundering— be made public so the 
information could be used in Poul- 
sen’s upcoming Northern Califor- 
nia trial on charges'of'possessing a 
national security document. 

U.S. District Judge Manuel Real 
refused to make the agreement 
public, saying he did not want the 
case "tried in the press." He al- 
lowed Schindler to send the plea 
agreement to the judge in Northern 
California, who will decide wheth- 
er the information contained in it 
can be used at trial. 

Poulsen already has been in jail 
about 3V6 years, the longest time 
spent behind bars by someone con- 
victed of computer hacking crimes. 

Times staff' writer Julie Tamakl 
contributed to this story. 
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Computer criminal caught 
after 10 months on the run 


By Keith Stone 
Daily News Staff Writer 

Convicted computer criminal 
Justin Tanner Petersen was cap- 
tured Monday in Los Angeles, 10 
months after federal authorities 
said they discoveredhe had begun 
living a dual life as their informant 
and an outlaw hacker. 

Petersen, 34, was arrested about 
3:30 a.m. outside a Westwood 
apartment that FBI agents had 
placed under surveillance, said As- 
sistant U.S. Attorney David 


Schindler. 

■A flamboyant hacker known in 
the computer world as “Agent 
Steal,” Petersen was being held 
without bail in the federal deten- 
tion center in Los Angeles. 

U.S. District Court Judge Ste- 
phen V. Wilson scheduled a sen- 
tencing hearing for Oct. 31. 

Petersen faces a maximum of 40 
years in prison for using his sophis- 
ticated computer skills to rig a ra- 
dio contest in Los Angeles, tap tele- 
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PETERSEN / From Page 1 

phone lines and enrich himself with 
credit cards. 

Monday’s arrest ends Petersen’s 
run from the same FBI agents with 
whom he had once struck a deal: 
to remain free on bond in exchange 
for pleading guilty to several com- 
puter crimes and helping the FBI 
with other hacker cases. 

The one-time nightclub promoter 
pleaded guilty in April 1993 to six 
federal charges. And he agreed to 
help the government build its case 
against Kevin Lee Poulsen, who 
was convicted of manipulating tele- 
phones to win radio contests and 
is awaiting trial on espionage 
charges in San Francisco. 

Authorities said they later learn- 
ed that Petersen had violated the 
deal by committing new crimes 
even as he was awaiting sentencing 
in the plea agreement. 

The deal fell apart Oct. 22. Peter- 
sen admitted that he had not given 
up computer crime, but somehow 
managed to slip out of the federal 
courthouse in Los Angeles. 

He then disappeared. 

Several weeks ago, a, man who 
identified himself as Petersen 
called the Daily News from an un- 
disclosed location. Petersen’s moth- 
er later confirmed the caller was 
him. 

Petersen said he was living com- 
fortably outside the United States 
and working as a bartender. He 
predicted he wouldn’t be caught. 

“I think I’ll have to run for two 


years. They’ll stop looking for me, 
or it will slow down immensely,” he 
said. 

“It is annoying that I can’t see 
old friends, I can’t go to the Rain- 
bow (Bar and Grill in Hollywood) 
and enjoy a lobster dinner at the 
front table,” he said. 

On Monday, FBI agents acting 
on a tip 'were waiting for Petersen 
when he parked a BMW at the 
Westwood apartment building. An 
FBI agent called Petersen’s name, 
and Petersen began to run, 
Schindler said. 

Two FBI agents gave chase and 
quick|y caught Petersen, who has a 
prostnctic lower left leg because of 
a car-motorcycle accident several 
years ago. 

Agent Stanley Omellas was reluc- 
tant to discuss the case, except to 
say that when he caught Petersen, 
the computer whiz asked: “How 
did you find me?” 

Schindler refused to provide ad- 
ditional details about Petersen’s 
capture or where authorities believe 
the fugitive had been living. 

It remains unclear whether Peter- 
sen will be charged additionally 
with fleeing custody and whether 
anyone will be charged with har- 
boring a fugitive, Schindler said. 
Petersen was carrying identifica- 
tion for other people when he was 
arrested, he added. 

“We know obviously there were 
people he was with,” Schindler 
said. 

In court, Petersen declined to 
comment, saying: “Mum’s the 


o 


word.” He was wearing prison- 
issue denims and did not appear to 
have changed his appearance while 
on the lam, except that his shoul- 
der-length hair was brown rather 
tiian dyed blond, as it had been. 

His mother, Joanne Dvorak, said 
she has been in contact with Peter- 
sen but did not know he had been 
arrested. 

“If he needs me, I am here,” she 
said. “Maybe this will be a blessing 
in disguise. Who knows — maybe 
he will get all straightened out. 

“I just don’t understand every- 
thing that is going on. Why do peo- 
ple do things like that? I just 
thought he was helping people — 
not doing bad things,” she said. 

Under Petersen’s plea agree- 
ment, he faces a maximum prison 
sentence of 40 years and a fine of 
$1.5 million and three years of su- 
pervised release. 

Petersen’s court-appointed attor- 
ney, Morton Boren, said he hopes 
the judge takes into account Peter- 
sen’s cooperation with authorities. 

In April 1993, Petersen pleaded 
guilty to six federal charges includ- 
ing conspiracy, computer fraud, in- 
tercepting wire communications, 
transporting a stolen vehicle across 
state lines and wrongfully accessing 
TRW credit files. 

Among the crimes that Petersen 
has admitted to was working with 
other people to seize control of tele- 
phone lines so they could win radio 
promotional contests. In 1989, Pe- 
tersen used that trick and walked 
away with $10,000 in prize money 
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from an FM station, court records 
show. 

When that and other misdeeds 
began to catch up with him, Peter- 
sen said, he fled to Dallas, where he 
assumed the alias Samuel Gross- 
man and continued using com- 
puters to make money illegally. 

In the summer of 1991 in Dallas, 
Petersen was pulled over driving a 
stolen Porsche and was arrested on 
charges that he had broken into 
credit bureau computers as part of 
a credit card scheme. 

In the telephone interview sever- 
al weeks ago, Petersen said his 
crimes victimized banks, not indi- 
viduals. 

“It wasn’t losing any people any 
money. It was coming from the 
bank. I do have a conscience,” he 
said. 

“Computers have always been 
interesting to me, and if I can find a 
sneaky way to make a buck that is 
interesting and fun — that is fine,” 
he said. 

When he was finally arrested in 
1991, Petersen said he played his 
last card. 

“I called up the FBI and said: 
‘Guess what? I am in jail,’ ” he 
said. 

He said he spent the next four 
months in prison, negotiating for 
his freedom with the promise that 
he would act as an informant in Los 
Angeles. 

The FBI paid his rent and utili- 
ties and gave him $200 a week for 
spending money and medical insur- 
ance, Petersen said. 


They also provided him with a 
computer and phone lines to gather 
information on hackers, he said. 

Petersen pointed agents to the lo- 
cation of Kevin Lee Poulsen’s com- 
puter. Poulsen was convicted in 
June of rigging radio station tele- 
phones to win Porsches, cash and a 
trip to Hawaii. 

Poulsen already has spent 
3'/2 years in custody — more time 
than any other hacker — and now 
is awaiting trial in San Francisco 
on espionage charges that involve 
breaking into an Army computer 
network. 

Coincidentally, on Monday a 
federal judge in Los Angeles denied 
a motion to unseal a plea agree- 
ment Poulsen had signed in the ra- 
dio scheme conviction. But the 
judge allowed the agreement to be 
used in the San Francisco case if 
the judge there agrees. 

Another computer hacker Peter- 
sen said he helped the FBI gather 
information on was Kevin Mitnick, 
a Calabasas man who was on pro- 
bation for an earlier computer 
crime conviction. 

Mitnick is a fugitive. 

Eventually, Petersen said, the 
FBI stopped supporting him, so he 
turned to his nightclubs for income. 
But when that began to fail, he re- 
turned to hacking for profit. 

“I was stuck out on a limb. I was 
almost out on the street. My club 
was costing me money because it 
was a new club,” he said. “So I did 
what I had to do. I am not a greedy 
person.” 
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Subject: 

LEGION OF DOOM (COMPUTER CRIMES) 




entirety. 


FCI - CRITICAL TECHNOLOGY (X) 
00: LOS ANGELES 


This communication is classified "S 


" in its 



Reference the communication sent under this title on 


8/16/94. 


The Atlanta Division investigated the computer hacking 
group, the Legion of Doom (LoD) , under file 65C-AT-62803 . The 
following is a complete list of LoD members and associates which 
appear in the book The Hacker Crackdown , by Bruce Sterling, 
and/or were uncovered by Atlanta during their investigation: 


(*) = indicates a reference in Sterling's book. 


be 

hie 


1 - 203C-LA-173258 
(3) - 65X-LA-126522 

1 - sa | 


MAD /mad 
(4) 














SECRET 


Known Associates of LoD: 


(Unknown) , aka 


Justin Tanner Petersen, aka "Agent Steal", aka "Phucked 
Agent 04". Subject of 65X-LA-126522 . Said by Sterling to have 
been part of the original "hacker wing" of LoD. (*) 


The above lis ted names are being p laced into this file 
for indexing into FOIMS I 
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Subject: 

LEGION OF DOOM (COMPUTER CRIMES) 
FCI - CRITICAL TECHNOLOGY (X) 

00: LOS ANGELES 



entirety. 


This communication is classified "S 



" in its 


Information relating to the computer hacking group "The 
Legion of Doom" (LoD) was obtained from the Atlanta Division as 
well as from the book. The Hacker Crackdown " . by Bruce Sterling, 
and other open source publications. 


According to Atlanta, the LoD was the subject of an 
espionage investigation conducted between 9/14/89 and 12/8/89 
under file 65C-AT-62803 . Three members of the LoD were charged 
with conspiracy to commit computer fraud, wire fraud and ITSP for 
their nart in breaking into Re'll Smith's einmnnter network. 

I plead guilty 

to charges of fraud and conspiracy according to a 7/10/90 Wall 
Street Journal article. \ 

~| They were sent to a federal prison 
camp in Talladega, Alabama, for their crimes. 
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The book The Hacker Crackdown states that| 

(identified as| | by the Atlanta Division) , formei 

the LoD when he was 18 years old who helped parlay a group of 
phone phreaks into computer hackers. "The LoD was built on the 
ruins of an earlier phreak group. The Knights of Shadow. Later, 
LoD was to subsume the personnel of the hacker group Tribunal of 
Knowledge. People came and went constantly in LoD; groups split 
up or formed offshoots. 


"Early on, the LoD phreaks befriended a few computer- 
intrusion enthusiasts, who became the associated Legion of 
Hackers. Then the two groups conflated into the Legion of 
Doom/Hackers, or LoD/H. When the original 'hacker' wing, Messrs. 
'Compu-Phreak' and 'Phucked Agent 04' (Justin Tanner Petersen the 
subject of 65X-LA-126522 and a fugitive from the FBI) , found 
other matters to occupy their time, the extra '/H' slowly 
a tr oph i ed out of the name; but by this time the phreak wing, 
Messrs. I I 

K ~ had picked up a plethora of 

intrusion expertise and had become a force to be reckoned with." 


A hacker using the n ame 
— I as an LoD member 

J • _ J ' r- I 


I 


by I 

computer associate of 

against LoD me mbers during their 1990 trial. 


was also identified 
a known 


7/22/yy tor 


4 : 


1 was _ „ 

1 who tftsti -Fi p.d 


had been raided by the U.S. Secret Service on 
eir part in the computer hacking of BellSouth. 


| also states, "There was no question that most 
any American hacker arrested would 'know' LoD. They all knew the 
handles of contributors to the LoD Tech Journal , and were likely 
to have learned their craft through LoD (electronic bulletin) 
boards and LoD activism. But they'd never met anyone from LoD. 
Even some of the rotating cadre who were actually and formally 
'in LoD' knew one another by board mail and pseudonyms." 
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TO DIRECTOR FBI/ROUTINE/ 




SUBJECT: JUSTIN TANNER PETERSEN, AKA ERIC HEINZ; ESP-X 

(COMPUTER HACKING); 00: LOS ANGELES. 

THIS COMMUNICATION IS CLASSIFIED 1 1 SECRET 11 IN ITO 
ENTIRETY-r 


AS FBIHQ IS AWARE, CAPTIONED SUBJECT WAS INVOLVED IN A 


SOPHISTICATED COMPUTER HACKING SCHEME WITH KEVIN LEE POULSEN 
IN LOS ANGELES, INVOLVING AMONG OTHER THINGS 



, % 




SEARCHED. 
INDEXED 


SERIALIZED. 






PAGE TWO DE FBILA 0007 S EpS<^ E T ^ 

SUBJECT ALSO CONTINUES AS THE FOCUS OF A PARALLEL 139 CRIMINAL 
INVESTIGATION 


ON OCTOBER 22, 1993, AS A RESULT OF INFORMATION RECEIVED, 
INDICATING THAT PETERSEN MAY HAVE BEEN INVOLVED IN ADDITIONAL 
CRIMINAL ACTIVITIES, HE AND HIS ATTORNEY APPEARED AT THE U.S. 



CRIMINAL ACTIVITY WHILE OUT ON BAIL. SPECIFICALLY, HAD HE 
BEEN USING STOLEN CREDIT CARDS. PETERSEN ADMITTED THAT HE HAD 
IN FACT BEEN USING THE CREDIT CARDS OF OTHER INDIVIDUALS., AT 
THAT POINT IN THE CONVERSATION, PETERSEN ASKED TO SPEAK 
PRIVATELY WITH HIS ATTORNEY. PETERSEN AND HIS ATTORNEY 
INDICATED THAT THEY WOULD RETURN SHORTLY, HOWEVER, WHILE ALONE 
WITH HIS ATTORNEY PETERSEN FLED THE COURTHOUSE. 

ON OCTOBER 22, 1993, U.S. DISTRICT COURT JUDGE STEPHEN 
WILSON REVOKED PETERSEN'S BOND AND ISSUED A BENCH WARRANT FOR 
PETERSEN'S ARREST, WHICH WAS EFFECTED SEVERAL MONTHS LATER. 

SINCE THAT TIME, FBI LOS ANGELES HAS FOUND NOTHING IN THE 
DATA CONTAINED ON PETERSEN'S SEIZED COMPUTER THAT WOULD 




PAGE THREE DE FBI LA 0007 S 


SUGGEST PETERSEN HAS BEEN ENGAGED IN ESPIONAGE. THIS MATTER IS 
CONSEQUENTLY BEING CLOSED. A NEW PLEA AGREEMENT HAS BEEN 
REACHED WITH PETERSEN, WHO IS NOW SCHEDULED FOR SENTENCING ON 
JUNE 5, 1995. INASMUCH AS THE CURRENT CASE AGENT HAS BEEN 
TRANSFERRED TO FBIHQ , THE RESULTS OF THAT SENTENCING WILL BE 
FORWARDED TO FBIHQ WITH A COPY FOR NSD UNDER THE 139 CAPTION. 

C BY^93^7^g£GL^Oj^ADR. 
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Precedence: PRIORITY 

To: FBI Headquarters 


From: Los Angeles 

NSD-3 
Contact : SAl 


Approved By: 
Drafted By: 
Case ID #: 


Date: 03/12/1998 


Att.: AI 


IRS 


,QQm 5022 ? 



] (310) 996-3557 
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b7C 


66F— HQ-C1227695 (Pending) 


Title: SHOT CLOCK; 
X ^ 00 : FBIHQ 


< u > Synopsis: Los Angeles review of case file 65X-LA-126522, 

captioned JUSTIN TANNER PETERSON , A.K.A. ERIC HEINZ; ESP-X 
(Computer HACKING); 00: Los Angeles. Los Angeles response to 

FBIHQ E.C. dated 02/26/1998 as captioned, and assessment of 

potent ial damage to National Security if former FBI Agent 
| compromised information provided to FBIHQ from 
FLA-] 




•126522. 




Derive 
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n: 
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DUE TO SENSITIVITIES INVOLVED. DISSEMINATION OF THIS 
COMMUNICATION AND HANDLING OF THIS REQUEST SHOULD BE 
HANDLED ON A STRICT NEED TO KNOW BASIS. UNDER NO 
CIRCUMSTANCES SHOULD ANY INFORMATION CONTAINED HEREIN BE 
PROVIDED TO ANYONE OUTSIDE OF THE FBI WITHOUT PRIOR 
AUTHORIZATION FROM FBIHQ . 


' :u: ' Reference: ^ FBIHQ EC dated 02/26/1998, as captioned. 

Referenced communication was sent to FBIHQ ADP and 
Telecommunications Security, Infosystems Security Unit, and 
Security Countermeasures Section. Copies were also sent to. Los 
Angeles and San Francisco. The EC contained nine interogatives 
designed to elicit responses that woul d assis t FBIHQ in providing 

■ - -- 1 'engaged in vis-a-vis 


a damage assessment for any activities 
65X— LA— 126522 . 
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To: FBI Headquarters From: Los Angeles 

Re: (Bl 66F-HQ-C1227695, 03/12/1998 


W Attachments: Excerpts from "The Watchman". 

Details: 0s1 In response to the lead set forth in referenced 

EC, the Los Angeles response to interrogatives follows: 




BI/ Headquarters From: Los Angeles 

66F-HQ-C1227695, 03/12/1998 


FBILA teletype to the Director, Dallas, 
Sacramento - ^ San Franc isco f and San Diego, (with direction to pass 
to SPU SSA| transmitted 08/07/1991, under FBILA file 

65X-LA— 126522 detailed the following compromises: 


8^41 




odology of how to compromise the 


[£* 


3 . The ability and means utilized to 
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FBI Headquarters From: Los Angeles 

($< 66F-HQ-C1227695, 03/12/1998 


6. Subjects could set up phone connections which 
give them the ability to monitor .telephone lines from any 
location via phone modems. It is unknown if they did. 

(si Bv teletype dated 08/16/1991/ LA 

65X-LA-126522 . tran 


By teletype dat ed 03/09/199 1. from San Francisco to 
the Director (pass to SPU SSA | 1 Los Angeles, and 

Dallas, under FBILA file 65X-LA-126522, San Francisco advised 
FBIHQ of Security and FCI implications for the San Francisco 
Division as a result of information compromised by the subjects. 
Among the issues addressed by San Francisco are the following: 

m )(<j i. san Francisco subject KEVIN POULSEN, an 

associate of Los Angeles —suhdect .TngTTTj PV'rrep.qoN j dg>nti fi e>d and 

contacted the subject of 

(U) 2. POULSEN once phys ically surveilled a phone 

company circuit box used to connect I I 


In 1987 


Francisco. POULSEN andl 

POULSEN’s hacking acti vity 
Consulate lookina for I 


surveyed the area around the Soviet 


They expressed interest m the 
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To: FBI Headquarters From: Los Angeles 

(U) Re: 66F-HQ-C1227695, 03/12/1998 


I'd 1 , subject of an FBJ operation where an Air Force 

' 1-1 ' enlistee volunteered classified information concerning the SR-71 


to the Soviets. 

(U) ■ 

locations \ ' 


4. Through physical break-ins at telephone compa ny 


(U) 5. During t he period 1989-1991 POULSEN and 

PETERSON created documents I | 

(U) B v teletype dated 09/04/1991, transmitted to FBIHQ 

(pass to SPU SSaI I, Dallas, Sacramento, San Francisco 

and San Diego, under file 65X-LA-126522, Los Angeles advised the 
following: 



2. LA advised recipients of 



4 ♦ FBILA recommended 


)&) By teletype dated 10/25/1991 to the Director, and 
Los Angeles/^by San Francisco, under file 65X-LA-126522 , San 
Francisco advised that San Francisco subjects POULSEN and 

I read in the n ewspaper of the FBI sting operation against 
| to volunteer t o pass military secrets t o 
the soviets . They concluded this was I ~l 


| They broke into a San Francisco telephone company 
central office that they speculated serviced the consulate in an 
attempt to verify their theory, but were discovered by phone . 
company employees and fled. In September, 1989, POULSEN visited 


5 







BT y Headquarters From: Los Angeles 

66F-HQ-C1227695, 03/12/1998 



(U) jpQ By FBILA teletype to the Director, dated 

06/08/1992, under file 268-HQ-1010175, subject | | FBILA 

responded to a HQ tasking concerning countermeasures necessary as 
a result of the activities of PETERSON and POULSEN. This 
communication highlighted the following: 


how one coulc 


among PETERS 
June, 1991. 


l. Methodology used and a step by step process of 


2. The existence of hard copy printouts found 
s belongings when he was arrested in Dall es, circa 


(ui 3. It contained recommendations as to preventative 

measures that could be taken to prevent future such discoveries 
(same as 09/04/1991 teletype discussed earlier). 

(U) 4. No indications that PETERSON had provided 

‘ to a hostile service I 1 


The foregoing is a summary of the information 
transmitted to FBIHQ concerning PETERSON nnd PQULSEN and the 
computer hacking/phone company intrusions 


5 ( 33 : 
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(U) 6. The FBI works with the phone company to 

facilitate telephone coverage. 


hi 
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FBI Headquarters From: Los Angeles 

£S$ 66F-HQ-C1227695, 03/12/1998 


POULSEN/ PETERSON 




|- San Francisco advised FBIHQ by teletype dated 

03/09/1991, sent under file 65X-LA-126 


liKU V if v# I { ■ Mi) D43 |«iK!<! I 




ana an interest 


This same teletvoe also advised that 




l There was no indication 

that POULSEN actually contacted the^ Soviets. In teletype dated 
10/25/1991, from San Francisco to the Director, under file 
$5X-LA-12<?522, POULSEN’ S a ctions I ~ 

I POULSEN | | entered a 

telephone office they speculated might service the Soviet 
Consulate , but were forced to leave when discovered. In 19 8 9 , 
POULSEN ghntjgri l~ I 



lOl 


( S i os Angeles found no evidence PETERSON had 












To: FBI Headquarters From: Los Angeles 

IU) Re: £S$ 66F-HQ-C1227695, 03/12/1998 


| KEVIN POULSEN was the subject or a _ 

Francisco investigation and was charged with espionage 


addition to the information contained witnin tms report, Los 
Angeles recommends that FBI HQ submit a le ad to Denver to 


interview retire d FBI Agent I | former FBILA Security 

Manage r. I I resides in t he Denver area and has telephone 

number ! I was rnnt ant ed by SA 

current FBILA Security Manager. | | was contacted to assist LA 

in locating any documents relating to a damage assessment . and for 
his recollect ions of eve nts fro m the period of investigation of 
the hackers. [told I I he had h ad nume rous discussions 

with! I about un related matters when l I was at SPU. 

| contact with I Iw as concerning various security 

related matters that! was involved with on a daily basis. 

The contact with! I was of the nature of a Field Office 


Agent | | former FBILA Security 
s in t he Denver area and has telephone 
I was contacted by SA 

Manager. was contacted to assist LA 







To: FBI Headquarters From: Los Angeles 

Re: 66F-HQ-C1227695, 03/12/1998 


requesting advice and assistance f rom FBI HQ. | I was, at the 

time, in a positi on with SPU where l~_ could resolve issues or 

gnhmii. queries to l I for resolution or action. In t his lig ht 

P may have information on other matters relevant to I [ o 

interest to FBIHQ. 

Additionally, attached to this communication is a 
copy of pages from the book “The Watchman”, by Jonathan Littman, 
published by Little Brown and Company, 1997. The attac hed 
extracts certain to the actions of POULSEN and PETERSON 


Los Angeles POC is S 


telephone 
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LITTLE, BROWN AND COMPANY 


Boston New York Toronto London 
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Copyright <D 1997 by Jonathan Littman 

All rights reserved. No part of this book may be reproduced in 
any form or by any electronic or mechanical means, including 
information storage and retrieval systems, without permission 
in writing from the publisher, except by a reviewer who may 
quote brief passages in a review. 

First Edition 


Library of Congress Cataloging*in*Publication Data 
Littman. [onathan. 

The watchman : the twisted life and crimes of serial hacker 
Kevin Poulsen * (onathan Littman.— 1st ed. 
p.cm. 

Includes index. 

ISBN 0-316-52857-9 

1, Poulsen. Kevin. 1965- 2. Computer hackers — United States- 
Biography. 3. Computers and society — United States. 

4. Computer crimes— United States. 5. Computer security— 
United States. L Title. 

HV6772.P68L57 1997 
364.1 6'8 , 092—dc2i 
96-47x68 

10987654$^* 

HAD 
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|ntral offices, examining switches, perusing manuals, taking pass- 
es and test trunk sets, collecting discarded Crossbars, once even pry- 
a pay phone off the wall. When Kevin’s not inside Pac Bell’s offices, 
t boots up his computer, turns on his modem, and roams the phone 
^mpany’s electronic ordering database — Cosmos, or Computer Sys- 
for Mainframe Operations. Studying those manuals he swiped has 
ned up worlds he didn’t know existed. Kevin can do just about any- 
ing he wants in Cosmos: start or modify phone service, add or remove 
lustom calling features, check for lines marked for repair, look up un- 
listed numbers. Kevin loves remote call forwarding or RCFs. For kicks, 
Kevin bounces calls around the Bay Area, trying to see how long a chain 
lie can create. 

Kevin and Gilligan fire e-mail back and forth, trading discoveries 
d comparing notes on everything from trunk lines and intricate Pac 
Sell calling options to tips on how to apply forty-eight volts to jolt the 
(elays on their Crossbar switches to life. It’s a strange mix of practical 
ihreaking knowledge and phone trivia, the messages both giddy and 
mspiratorial, laced with reminders to call from a secure phone and 
ring tennis shoes and Levi’s. 

, Kevin believes his adventures are innocent. This is the phone com- 
any, after all, once the world’s biggest monopoly. He can’t imagine 
low his hobby could possibly threaten such a giant, powerful bureauc- 
acy.The phone company is practically invincible. He’s just a kid swing- 
fegon the giant’s shoelaces, going for a ride. 




jilligan lives near the San Francisco Soviet consulate, infamous for its 
Satellite dish and forest of rooftop antennae aimed like ICBMs at Sili- 
con Valley. One of just three Soviet missions in the United States — the 
Others are the embassy in Washington and the United Nations — the 
Consulate is of huge strategic importance to the Soviet Union.The FBI 
estimates a third of the thirty-five- to forty-member delegation attached 
the San Francisco consulate are intelligence officers. Against that 
Id war backdrop, Gilligan e-mails Kevin about how cool it would be 
get a number similar to the Soviets’ and snare some fascinating 
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wrong numbers. Then Gilligan follows up his message with a note 
about how reality seems to have anticipated his fantasy. j 




TO: KEV@SPAM.ISTC.SRI.COM 
SUBJECT: THE FBI 

DATE: 28 OCT 86 09:45:38 PST (TUE) 

FROM: GILLIGAN@SUN.COM (GILLIGAN GILLIGAN) 


It looks like the FBI had the same idea as I, but earlier. Did you hear 
on the news about this guy, a former Air Force enlisted man, who '■ 
was arrested yesterday for spying? Well the news stories said that ' 
he phoned the Soviet embassy in San Francisco and told them that i 
he had some secrets to sell. Unfortunately for this guy, the news story 
went on, the FBI “intercepted his telephone call” and staged a meet- i 
ing with an undercover agent, who this guy mistook for a Soviet • 


I wonder what kind of arrangement they have? The embassy phone i 
number (922) is definitely in the [central] office that serves the area 
where the embassy is located. Perhaps the FBI just has the lines run 
through their offices and always acts as “receptionist” for the Sovi- 
ets. I wonder what the entry for that line looks like in Cosmos? 

Obsessed, Gilligan drives by the consulate and urgently e-mails Kevin 
that all the windows on the first floor aren’t windows at all but really 
one-way mirrors. But what intrigues Gilligan is how the FBI caught the! 
spy. Does the FBI screen the Soviets’ calls, and if so why wouldn’t the So- 
viets catch on? Gilligan suggests the hackers find out for themselves, i 
"I think we should just give them a call and ask whoever answers 
who they are— FB I or embassy staff,” Gilligan e-mails Kevin. “What do 
you say? We could do it on 3-way.” 
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FBI WIRETAPS HACKED BY KEVIN 



Kevin discovered the FBI was wiretapping 
foreign consulates and Ferdinand Marcos. 
He aso discovered the site in the Los 
Angeles FBI headquarters building where 



South African consulate 
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Pac Bell office where Kevin discovered 
Ferdinand Marcos wiretap 
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• evin sees what others don' 


When Eric spots the thin metal D.MR tap lying on the floor 01 the 
Sunset CO, he only sees a, hunk of steel connected to the frame. But 
Kevin looks beyond the physical discovery. He’s interested in general 
principles, the greater framework. If he can understand how a single tap 
is placed perhaps he can understand others. Perhaps he can anticipate 
the taps he tears Pac Bell might place, on the lines of his parents and 
friends. i 

So Kevin checks Cosmos and finds a clue. The on-line record does! 
not — like a normal telephone number — include a cable pair assign- 
ment. From his apartment. Kevin dials Cosmos and begins searchingfor 
more of these unusual phone numbers. The first pass turns up over a 
hundred records, far too many taps for a single central office, and Kevin 
chastises himself for not anticipating the problem. Foreign exchances, 
numbers that ring in one office and then run over a carrier to another 
office, don’t show a cable pair, nor do remotely call forwarded numbers. 

Kevin begins a crude search for every Pac Bell DNR tap in the state 
of California. When the sheer volume of the search bogs down in Cos- 
mos, Kevin writes a program to streamline the process. Pac Bell’s com- 
puters do his grunt work. His program runs on twenty Cosmos >r,s- 
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| chines, half of them located in San Diego, the other half in Hayward. 
; searching millions of telephone lines. 

In just ninety minutes, Kevin Poulsen turns up roughly seven Pac 
Bell wiretaps spread around the state. He could visit the central office 
where each tap is located, to listen in, but he doesn’t need to— he’s got 
SA S. Kevin check s the firs: lir.e. Hi hears a high-pitched :or.i, a signed 
to we phone company's tape recorders that the phene :s on the nook 
and there's nothing to record. Then, the curtain of sound suddenly lifts, 
and he hears modem breath. Kevin watches someone upload a program 
:'/ a bulletin board, then skips to a couple of other ne - — a c . :*.* -rja- 
tion, and more data transmission. He types a one-hne description of 
v.-ha: he finds on each tap. 

Only Kevin knows exact.'/ way he eavesdrops. Tr ill:::: :ap; r a: e 
an obvious attraction for a hacker, but for Kevin maybe it’s a question of 
survival, of checking the taps in case they lead back t< < him. Or perhaps 
something simpler, the allure of playing Jimmy Stewart in Hitchcock's 
Rear Window. Could Kevin have a higher goal? Might he be looking out 
for phone phreaks or others he believes are being unfairly targeted by 
the Phone Company? Whatever his motivations, that evening Kevin 
doesn’t find anyone who merits his protection. 

Each afternoon, Kevin searches the offices that sv. itch Eric's. Ron’s, 
his parents’, and his own calls, canvassing every phone line in North 
Hollywood. Glendale. Sunset, Be*. erl\ Hills, and Van 1 . :ys. I !■.■ car. " c:n 
lucking before his search is complete, because he kn >ws how the -.vs- 
em works. The records are entered into Cosmos a da or so before > he 
echnician physically hooks up the tap to the frame. It's a remark.sbie 
insight. The Watchman has developed the power to anticipate every 
Pac Bell wiretap in the state of California. 


Kevin finds it in a B box on the street one night, a thin metal device \\ ith 
phone wires going in one end and out the other, ane a big red sticker 
that warns. “Do not remove this device! Please call sec trity at . . 
Something tells Kevin this is different from the D R tap he found 
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on Spiegel’s line. At his apartment, he runs the circuit number listed of 
the device through Word, a Pac Bell system that tracks private circuitf 
“Please contact Mark Yelchak in security," says the file, giving an as 
dress of 180 New Montgomery. That’s funny, Kevin thinks, rememben 
ing his late-night visit to Pac Bell’s New Montgomery headquarters. I 

He pulls up the building in various Pac Bell systems, checking flocJ 
by floor. Something doesn’t look right. Suddenly it hits him. The builiS 
ing he burglarized was 140 New Montgomery — not 180. Kevin zeros iia 
on a single floor dedicated to security, a department called Electronic 
Operations, and finds fifty phone lines all grouped together. Electronic 
Operations — what could it mean? The files on each line contain a refer- 
ence to the. Pac Bell Computer Security System, and reveal the equips 
ment on each line. Tape recorders. Fifty of them. 

Kevin isn't totally surprised by his discovery. He knows that Pac Bell 
and other phone companies are required by law to carry out federal, 
state, and local court-ordered wiretaps. It’s a carefully monitored legal 
process. The federal criminal code orders the assistant attorney general 
to “reveal the identity of the . . . law enforcement officer making the ap- 
plication . . . (and) make a • • ■ statement as to whether or not other inves- 
tigative procedures have been tried and failed.” Only specific crimes 
such as murder, espionage, kidnapping, racketeering, drug dealing, 
bribery, and fraud can justify taps. Even U.S. intelligence agencies have 
to apply to the Foreign Intelligence Surveillance Act court for national 
security wiretaps. 

The Pac Bell taps Kevin has discovered appear to be DNRs which 
can double as wiretaps. That’s what troubles Kevin. He knows there’s 
nothing stopping Pac Bell from tapping dozens of lines on a moment’s 
notice. Phone companies are the only entities in America that can wire- 
tap with impunity, the only entities granted more power than the CIA, 
the NS A. or the FBI. The federal statute states that it is “not unlawful’ 
for “an operator of a switchboard, or an officer, employee, or agent of a 
provider of wire or electronic communication service" to use that same 
service to “intercept . . . that communication” in the “protection of the j 
rights or property of the provider of that service ” ] 

Somehow this doesn't make sense to Kevin. Other companies can’t 
invade their customers’ private conversations. Why shouldn’t Pac Bell 
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and other phone companies turn their fraud cases over to the proper 
law enforcement agencies, and let justice take its course, like other cor- 
porations? 

But Kevin knows that the taps are only the tip of the iceberg. The 
statute is silent on the right of phone companies to perform traps and 
traces and detailed analyses of a suspect’s calling patterns. If Pac Bell 
wished to hide an investigation from the FB I or Secret Service, no court 
could force it to reveal the nature or target of its inquiry. Even the an-, 
nual number of taps is secret. Does Pac Bell wiretap ten people a year, 
fifty, or a thousand? 

Kevin decides to find out. First he dials the fifty phone numbers at 
180 New Montgomery and discovers that no matter what the hour they 
ring endlessly or are forever busy. Then he wiretaps all fifty lines with 
SAS. If he hears anything — conversation, modem tones — he writes a 
one-line summary. He comes up with seven working taps. 

Kevin repeats his statewide Cosmos Pac Bell wiretap search, and 
ninety minutes later he can’t believe what he’s found. Seven numbers, 
the same figure he found in 180 New Montgomery. He drops in on the 
Cosmos taps scattered around the state and hears the same voices and 
sees the same data. It’s as if he’s stumbled onto a parallel universe. Every 
Pac Bell tap has two different monitor lines, one in the local central 
office attached to the suspect’s line and another at 180 New Mont- 
gomery attached to a tape recorder and the Pac Bell Computer Security 
System. Security investigators can dial any of those fifty numbers and 
enter a remarkably easy one- to eight-digit security code. And Kevin 
knows that if the monitor line happens to be down the tap will be sit- 
ting there waiting to be exploited. Kevin won’t even need SAS. Just dial 
the number plus the security code and wiretap the wiretapped. 


Kevin hasn’t forgotten about Mark Yelchak at 180 New Montgomery. 
He begins perusing random circuits on-line, and after a little checking, 
finds another record that suggests he contact Yelchak. Kevin compares 
it to the first circuit he found in the B box. Both are identified by two ran- 
dom numbers, then the. letters A FLA, followed by a string of random 
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digits. That isn’t all the two circuits have in common. Both originate in 
ordinary B boxes and terminate at i rooo Wilshire, the federal building, 
Los Angeles headquarters for the FBI. After further study, Kevin finds a 
couple of alarm pairs that don’t run to the Federal building but share 
the AFL A designation. Kevin can’t explain the false positives, but then 
he doesn’t really need to: over 90 percent of the A FLA circuits he finds 
are federal wiretaps. 

What surprises Kevin is how easy the federal government makes it 
to crack their vaunted veil of security. Since the early days of Hoover, 
wiretaps have been the secret weapon of the FBI, powerful enough to 
ensnare gangsters and keep political enemies and presidents in check. 
Indeed, traditionally wiretaps have been what separates the govern- 
ment from the crooks. The idea that an ambitious hacker with a PC 
could expose federal taps is absurd. If that’s all it takes, then how well 
could the FBI be expected to investigate mobsters, corrupt politicians, | 
and spies? ! 

But as Kevin learns more about how the government and Pac Bell 
track federal wiretaps, he discovers that it’s even worse than he 
thought. The Bureau is not the only federal agency that permits Pac Bell 
to track its taps on-line. Kevin soon finds taps running to two occupants 
of the Los Angeles World Trade Center, the DEA and the Secret Ser- 
vice — the primary federal agency entrusted with investigating hackers. 
And when Kevin enters “AFL A” circuits into another Pac Bell system to 
find out who ordered them, he finds that federal agents may actually 
have a sense of humor. “Acme” and the “Busy Bee” answering service or- • 
der lots of federal wiretaps. j 

Being curious, Kevin sometimes wants to know who’s being tapped. 

He could find the actual B box on the street, pry it open, and trace the 
wires from the metal federal tap to the binding post and the specific 
cable and pair numbers. Then, with Cosmos, he could turn the cable and 
pair into a phone number that could be entered into other systems to re- 
veal the person’s name, social security number, birthdate, driver’s li- 
cense, and finally the street address. 

But Kevin checks few taps this way. Why rely on physical crutches 
if he can hack the answer? Many of the federal taps are in the San Fer- 
nando Valley, and Kevin sets out to learn why. Since Pac Bell’s comput- 




; volunteer 
jfthe busined 
ranee com 
pg, the comi] 
pornography 
ido Valley 
Kevin can] 
apartment. H 
^jhoes, then ( 
irithin the tai 
ag on the fei 
|dphone numb 
^ ' ished to, list 
£?/ Why shot 
Ipursue him, v 
&Kevin has to 
|.massive hole 
|iment holds ir 
^founding fatl 
\ (it, they inste 
* fless searches 
^counter any gj 
^corrupt. 

Once a da 
^(checking doz 
J an hour, the 
H eign agents vj 
f I FBI wiretap 
in the Union, 
j * of the most a<! 
i. simply knowj 
i and subscribe 

( day it receive 
fore the taps 
power to cor 
cret Service. 


THE WATCHMAN 
168 



li 


)th originate in 
.’deral building, 
y, Kevin finds a V 
Iding but share 
itives, but then r 
ircuits he finds 

iment makes it 
lays of Hoover, -j 
■rful enough to 
dents in check, 
es the govem- 
ker with a PC 
then how well 
upt politicians, 

nt and Pac Bell ii 
vorse than he 
•ermits Pac Bell 
two occupants 
the Secret Ser- 
gating hackers. 

: Bell system to 
s may actually 
ring service or- 

s being tapped. 

and trace the 
ad the specific 
n the cable and 
r systems to re- 
ate, driver’s li- 

/sical crutches 
in the San Fer- 
Bell’s comput- 


ers volunteer the B box of the tap, Kevin systematically checks the lines 
of the businesses within the building or block. Most appear ordinary: in- 
surance companies, accountants, and lawyers. But then there’s a red 
flag, the company name for what seems to be a publisher or producer of 
pornography. It makes sense. Los Angeles, and specifically the San Fer- 
nando Valley, produces much of the world’s pornography. 

Kevin can definitively locate the pom tap without ever leaving his 
apartment. He can remotely tap the tapped line in the B box with S AS 
shoes, then dial the suspected pom business or call every number 
within the target building. The proof? The sound of his own phone ring- 
ing on the federally tapped line — through his own tap. He’d have the 
phone number of the target of a federal investigation, and could, if he 
wished to, listen in. 

Why should the government hold all the cards? If they’re going to 
pursue him, why shouldn’t he be able to track their moves? That’s why 
Kevin has to take it further and write the program that will blast a 
massive hole in whatever false sense of security the federal govern- 
ment holds in its ability to play Big Brother. And really, why not? The 
founding fathers didn’t promote spying in the Constitution. Far from 
it, they instead wrote the Fourth Amendment, prohibiting warrant- 
less searches and seizures, and emphasized the right to bear arms to 
counter any government that might one day prove unrepresentative or 
corrupt. 

Once a day, Kevin’s computer polls the Southern California systems, 
checking dozens of central offices at a time. Each day, in a little over half 
an hour, the computer accomplishes a task for which the mob or for- 
eign agents would gladly pay thousands of dollars. Kevin knows every 
FBI wiretap in Southern California, more than half of the largest state 
in the Union, boasting the sixth largest economy in the world, and some 
of the most advanced, classified technology in the nation. Kevin doesn’t 
simply know the existing wiretaps. Pac Bell enters the circuit identifier 
and subscriber information, such as “Acme,” into its computers the very 
day it receives a federal court order. But it’s often days or even weeks be- 
fore the taps are installed, days or weeks in which Kevin holds the 
power to compromise the moves of the FBI, the DEA, or even the Se-- 
cret Service. 
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Who could possibly be wiretapping thirteen lines? 

Kevin has found a building with thirteen taps, far more taps than 
he’s ever found clustered in one location. Publicly, the FB I claimed that 
it wiretapped less than 250 people the previous year. How then could 
there be thirteen wiretaps focused within a single building in Beverly 
Hills? 

Few federal judges would authorize thirteen wiretaps on a single in- 
dividual or business. Even the biggest mob investigations seldom reach . 
that size. No, Kevin has hit on something larger. Excited, he learns that 
the thirteen lines are being monitored from the federal building. He 
traces the tap back to its target, a process that is now second nature. At 
first, the Beverly Hills address means nothing to him. What could be so ; 
interesting across the street from the Beverly Center, the posh shopping 
mall for movie stars, celebrities, and the rich? 

Not more than a few hundred feet from the shopping center stands 
the South African consulate. Could it really be true? 


Ron punches up South Africa in Nexis, and watches the stream of sto- 
ries mentioning nuclear power leap from the screen. The two hackers 
are dumbfounded. They’ve stumbled onto real life, honest-to-God spy 
taps, the stuff of espionage and national security. Kevin and Ron can’t 
possibly know whether the taps are authorized under the Foreign Intel- 
ligence Surveillance Act by the Washington, D.C., court that grants 
taps to the CIA and other spy agencies. Unlike common FBI and state 
and local wiretaps, the court authorizations for spy taps have, according 
to the justice Department, never been made public. But what the hack- 
ers have uncovered stuns them. Pac. Bell’s own on-line, Net accessible 
records provide irrefutable evidence the spy taps have been in place for 
several years. 

It’s just the beginning. Kevin finds ten more wiretaps that run back 
to the federal building, ten wiretaps in the Los Angeles consulate of our 
friendly ally Israel. And there’s more. Incredibly, Kevin uncovers four- 
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teen taps near an office of the American Civil Liberties Union around 
Wilshire and Sixth Street. Could one of the biggest FBI counterintelli- 
gence operations in Los Angeles be targeting the American Civil Liber- 
ties Union? Kevin checks all the businesses within the ACLU’s build- 
ing and finds one with five lines and another with two. There’s no 
match, so his hunch about the ACLU must be wrong. But the Chinese 
consulate, on Shatto Street, off Wilshire, three doors down the street 
from the ACLU, has fourteen lines. And something else is unusual. In-, 
stead of running back to the federal building like the other foreign taps, 
the Chinese taps loop, jumping up to another floor, and then dropping 
downstairs. Could the feds be listening to the Chinese from an upstairs 
office? 

The game of hacking has suddenly drawn Kevin into a dangerous 
world of international espionage. He can systematically ferret out spy 
taps anywhere in Southern California, and he knows that it’s a small 
step to extend that capability to the rest of the nation, and even, poten- 
tially, overseas. Kevin could send evidence of the taps to the South Afri- 
cans, the Israelis, the Chinese, or even the Los Angeles Times. What might 
the Israelis think about the ten wiretaps? And what might the FBI 
think about its secret taps being featured on the evening news? What 
might it think about a couple of hackers delving into national secrets? 

Ron phones the number Kevin has dug up for the FBI’s counterin- 
telligence front operation at the Chinese consulate building and pre- 
tends to be looking for a job. The spies at J. W. Collins & Associates can’t 
seem to get their story straight. One day they’re in the publishing busi- 
ness, the next they’re in the information business. What side of the in- 
formation business j. W. Collins & Associates pursues is not something 
the company cares to discuss. Ron decides to pay a visit to the consulate, 
a large, white office building. As he gets out of his car he notices some 
dilapidated apartments across the way, and has the uneasy sensation 
he's being watched. He strolls through the marble lobby, past the cheap 
chandelier and half-dozing security guard, and takes the elevator to the 
second floor. A laminated plaque next to the tall brown doors tells him 
he’s in the right place, j. W. Collins & Associates. 

The office is larger than he imagined, covering nearly half the floor 
of the consulate’s building, and resembling a law firm. Magazines are 
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neatly arranged around the chairs and table in the waiting room, a 
Ron can see numerous Macintosh computers and desks beyond. T 
only crack in the FB I’s counterintelligence facade is the absence of p< 
pie during normal business hours. Nobody seems to be home. T 
woman comes out after quite some time, a little old lady right out of t 
pages of a John le Carre novel. 

“Can I help you?" 
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alibu? 


Kevin’s found his first wiretap in the coastal home to Hollywood’s 
stars. As he investigates further, he notices that the Malibu tap runs to 
aregional FBI office in Van Nuys. Why, Kevin wonders, is this tap run- 
ning to a small office, situated farther from the tap than the federal 
building? 

This time Kevin sees no easy method to divine the subject of the fed- 
eral eavesdropping. SAS doesn’t work with GTE, which handles ser ; 
vice in Malibu. So how can he do it? The easiest method would be to 
drive out to the actual B box in Malibu and physically trace the lines, 
but Kevin keeps his actions secret. All Ron knows is that Kevin discov- 
ers that along with the FBI field office, a nearby Malibu residence has 
been set up as a listening post, and to add to the mystery, the subject of 
the wiretap appears to be a tony restaurant on the edge of the Pacific. 

Why would the feds take such elaborate security measures for a res- 
taurant? Ron searches the restaurant’s name in Nexis and a story begins 
to unfold. An October 1988 LA. Times article describes a Prudential 
Bache executive who “accepted a $2 million post-dated check from 
ZZZZ Best carpet-cleaning kingpin Barry Minkow after he flew her to 
Los Angeles” and “took her out for an intimate seaside dinner ... . , at 
Malibu’s Splash restaurant.” 
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Keyin and Ron, like just about everybody in Los Angeles, remembeo 
the ZZZZ Best scandal. The story became a parable for the greedy eigh 
ties, an improbable tale of a kid who seduced Wall Street and bilked 
thousands of investors with a carpet-cleaning pyramid scheme. But 
how does Splash fit in? And why would the feds still be tapping the joint 
long after Minkow had been exposed? Another article describes 
Splash’s manager as Ronnie Lorenzo, “a member of the New York-based 
Bonnano crime family” and then names prominent New York mafiosos 
who frequented Splash and muscled in on the ZZZZ Best scam. 

Kevin has hacked his way into one of the most publicized scams of 
the last two years, a national front-page story that led to congressional 
hearings. The federal attention and media circus only highlights 
Kevin’s phenomenal find. Advance knowledge of federal wiretaps is in- 
deed a powerful tool, and the more Kevin thinks about it. the more he 
realizes how fortunate it is that he’s continued his vigilance against 
Eric. Eric already works for a detective who has no scruples about illegal 
wiretaps. What would stop Eric from offering his services to the mob to 
uncover federal wiretaps? Kevin knows it’s not a hypothetical question. 
Although Minkow’s in jail, the Splash tap is still live. Very live. Incred- 
ibly, withm weeks of Kevin’s discovery, Ronald Lorenzo, the owner of 
the trendy Malibu nightspot, begins having a series of phone chats with 
one Robert Franchi, an undercover FBI agent, over the very same line 
Kevin knows is being tapped by the FBI. 


Kevin makes the seven-hour drive to Northern California to visit Lottor i 
and Gilhgan. but it’s a little too long for his oil-leaking clunker. Just 
short of the Menlo Park exit, the engine seizes and the car dies on the 
freeway. Lottor isn’t at his condo when he straggles in, and without a car : 
Kevin wonders how he’ll pass the afternoon. Then he remembers. ’ 
There's a tap in the neighborhood he could check. 

Kevin doesn’t have, long to wait before a white van pulls up to the B 
box. The driver, wearing a suit and a tie. doesn’t look like a Pac Bell tech- 
nician. Kevin sits on the wall near the 7-Eleven and sips the Coke he just 
bought. The man looks at Kevin and Kevin looks back. Even from a dis- 
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] tance, Kevin sees him carry the six-inch-long metal tap from the van. He 

• . can’t quite make out the rest, but he can guess the routine. The man will 

' connect the eavesdropped line to one end and the federal line to the 
* other, lock the box, and be on his way. Kevin knows it’s almost certain 
■’ the box holds a federal tap: the FB I is about the only entity that bothers 
to lock B boxes. 

. Finally, after all his years as a hacker, Kevin has witnessed the plac- 

ing of a federal tap. But far from being impressed, he’s amused at what 
seems an amateur process. By its own count, the Bureau taps fewer than 
a few hundred people a year. So if the FBI considers the subject of the 
tap important enough to merit surveillance, why does it execute the 
final physical connection with all the subtlety and secrecy of Maxwell 
Smart? 



Tucked away behind the hills east of Oakland, Concord draws Bay Area 
professionals for its warm weather, open space, and outdoor concerts. 
Kevin’s heard of Concord, but it’s always seemed sleepy. That’s why he’s 
surprised to find that the suburban community is home to a hotbed of 
FBI wiretaps. 

A Nexis search would open his eyes to another side of the East Bay 
community. Concord is also home to the Concord Naval Weapons Sta- 
tion, the major West Coast supply center for military weapons and am- 
munition. Numerous reports, never confirmed by the military, say the 
station houses nuclear weapons. During the 1980s, the station became 
a trigger point for demonstrations about arms shipments to Central 
America. Antiwar demonstrators believed an elite FBI counterterrorist 
unit at the Concord office was specifically tracking one of the leading 
protesters. Brian Wilson, a former Vietnam Air Force Intelligence 
officer, had learned that the station shipped deadly white phosphorus 
explosives to El Salvador. 

Then, in September of 1987, a terrible “accident” at the weapons sta- 
tion raised an international stir. Wilson lost both legs trying to block a 
train carrying munitions for the Contras and was declared a “coura- 
geous peace fighter” by Soviet newspapers. A fired FBI agent told the 
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LA. Times that the Bureau considered Wilson a terrorist, engaged in a 
“violent conspiracy” against the government. Congresswoman Barbara 
Boxer demanded to know why the Navy train didn’t stop. Was it an un- 
avoidable accident? Or was the fired FBI agent correct that the Bureau 
considered Wilson a terrorist? And could the FBI have tapped the 
phones of Wilson and other protesters? 


Kevin is more secretive about the Concord taps than he’s ever been be- 
fore, this time mentioning nothing to Ron and encrypting his files sev- 
eral times. Whether Kevin is alerting any of the targets of federal sur- 
veillance is hard to know. He has the tools and the knowledge, but it’s 
not simply a technical question. Kevin weighs who he believes is de- 
serving. If he encounters a hacker he deems worthy Kevin feels he has 
no choice but to warn him of the surveillance. 

One evening, Kevin discovers a tap at r8o New Montgomery and lis- 
tens to Shadow Warrior and a friend, a couple of young hackers toying 
with internal phone company test numbers and computers that re- 
spond in synthesized voices. Kevin takes to them immediately and de- 
cides they must be warned, but he can’t just break in and say Dark Dante 
is coming to the rescue. Kevin prizes his ability to find taps for his own 
protection. How can he warn the hackers without clueing Pac Bell into 
his knowledge? 

Just then. Shadow Warrior’s friend three-ways off to listen to the 
synthesized voice of a credit card approval system. 

“APPROVED FOR FIFTY DOLLARS," booms the staccato voice, 
and then mechanically reads off a phone number. The credit card sys- 
tem performed an ANA, an automatic number announcement check, 
and spat back the kid’s phone number. 

This is my opportunity. 

Kevin punches the number on his test set. 

“Oh shit,” says the friend as his call waiting beeps. “Should I answer 
it?” 

“Yeah! Answer it! Answer it!” shouts Shadow Warrior. 

But his friend chickens out. “Oh shit, now I’ll never know.” 
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Don’t worry, you^^et a second chance. 

Kevin waits a r C^j te, then punches redial. This time the y 
picks up the call. “Yeah right!” Kevin swaggers, trying to sound lflce a 
cop. “We know all about you and your buddy Shadow Warrior, and 
you’ll be hearing from us soon." 

Kevin is surprised by his emotions. His voice shook a little as he 
. alerted the kid to the tap. He hangs up and eavesdrops on Shadow War- 
rior’s monitor line. 

“Oh shit, what was that?” the friend frantically asks Shadow War- 
rior. 

“What happened?" asks Shadow Warrior. 

“This guy!" exclaims the friend. “Man, he was serious business! And 
! then the conversation slips into what sounds like code. They seem to 
| have gotten the point. They start talking about meeting somewhere. 
! Kevin doesn’t need to listen anymore. 

The Watchman has done his part. 


But Kevin’s duty is not only to warn those being targeted by the phone 
company. When necessary, he taps his own enemies. 

“I don’t want to talk to you anymore, I don’t want to hear from you 
anymore!” Eric declares in an unusually stiff, angry voice mail to Kevin 
not long after Kevin spooked him from Sunset. “We’re finished because 
you tried to mislead me from valuable access! You should forget that I 
exist! Any attempts to locate my whereabouts will not be tolerated! 

Kevin has a quick retort: “I’ll be happy to forget you existed provided 
that no evidence of your existence is forced upon me.” But a few weeks 
later, while combing Pac Bell’s on-line security memos, Kevin finds 
what he believes to be damning evidence of Eric s existence. Months be- 
fore, not long after the three met, an anonymous tipster asked for Steve 
in the security department, and said an L.A. hacker had cracked the 
BANCS network at Pac Bell’s San Ramon offices. “I also am a hacker in 
Los Angeles,” the memo quoted the tipster, and then noted, the caller 
sounded young.” 

Kevin calls Ron for an emergency meeting. Ron is his court, his mag- 
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istrate, and Kevin rarely taps without his approval. Kevin formally pre- 
sents his evidence, an official computer printout of Pac Bell’s security 
memo, and makes his argument that Eric must be the rat. “See how it 
mentions both the intruder and the tipster are from L.A.” 

Ron considers this for a moment. He recognizes his role as magis- 
trate is to consider the suspect’s rights fairly. “Yeah, but it says he’s 
young,” he notes. “Eric doesn’t sound young on the phone." 

Kevin reluctantly agrees that Eric doesn’t sound young— for a 
hacker. But he has another, more compelling argument. “OK, but how 
many hackers who have access to BANCS are going to be snitched on, 
and are going to ask specifically for Steve, in the security department?” 
Kevin seems to have a point. He had told Eric about Steve Dougherty, 
one of the Pac Bell investigators who searched his condo in Menlo Park. 

“All right, you win,” Ron declares. “You’ve got probable cause.” 

Kevin is pleased at having won his wiretap order through a fair, ju- 
dicious proceeding. He knows he had to fight for the tap just like an as- 
sistant U.S. attorney, and he knows that Ron gave it a lot more consid- 
eration than the countless federal judges who routinely rubber stamp 
applications for wiretaps. 

A straight SAS tap is out of the question because Eric’s phone ser- 
vice is through an old electromechanical switch and he would likely no- 
tice the click. But Kevin’s got just the thing. He takes one of the clunky 
metal federal taps he swiped from a B box and installs it in the phone 
closet of a random business on Cahuenga in Hollywood. He connects 
the side that normally would run to the federal building to a phone line 
that he juices. Next, he bridge lifts the Cahuenga line to Eric’s Sunset 
central office, where he cleverly wires it to Eric’s line on a place on the 
frame where he’ll never find it. Finally, Kevin dials the new line he's cre- 
ated at the Cahuenga phone closet with SAS. 

There’s no click on Eric’s end, and if someone happened to dial the 
number he just created all they would get would be a disconnect record- 
ing. It’s not just ingenious. It’s a good example of the level of sophistica- 
tion the feds might employ if they wanted to make their taps harder to 
detect. 

Two days after putting up the tap, Kevin has listened to several of 
Eric’s calls to Freda, when he hears him phone a friend and announce, 



g.-Youl 
■jl'crafte 
pf Eric r 
tfy probl 
every 
* v him v 


Kevin 
coupl< 
[finglo 


to tail! 




THE WATCHMAN 
178 


>rmallypre- 
- U’s security 
I“See how it 

* 

* le as magis- 
it says he’s 

■ung — for a 
■K.but how 
snitched on, 
ipartment?” 
Dougherty, 
Menlo Park, 
cause.” 

.gh a fair, ju- 
st like an as- 
nore consid- 
rbber stamp 

s phone ser- 
lld likely no- 
■f the clunky 
n the phone 
He connects 
a phone line 
Eric’s Sunset 
place on the 
line he’scre- 


*You know me. I’m a live-and-let-live type of guy.” The phrase sounds 
crafted for Kevin’s e;Qhough there’s virtually no technological Q 
Eric might have uncovered to prove he’s being tapped. But there s mfe 
problem even Kevin can’t avoid. Eric, being a wiretapper himself, has 
every reason to assume that Kevin can’t resist the temptation to put 
him under electronic surveillance. 


Kevin phones Eric and suggests a face-to-face meeting. They meet a 
couple of blocks from Eric’s old Sunset apartment, in the crowded park- 
ing lot of Ralph’s Supermarket. 

Kevin starts by confronting Eric with the evidence he s found in Pac 
Bell’s security files that suggest Eric’s informed on him, but Eric wants 
to talk about something else. 

“There’s something I can’t tell you, something about my past," Eric 
begins mysteriously. 

Kevin doesn’t see what Eric’s past can possibly have to do with his 
betrayal. “What, you mean that you informed on your friends?” 

“No, what I mean is there is a reason I’m here in L. A., a reason under- 
lying everything I’m doing here, and I can’t tell you anything more 
about it." 

“OK, Eric. Great. So why’d you rat on me?” 

“I wouldn’t snitch on you.” 

“Really. Then what about this tip?” 

Eric laughs, a quick, short, humorless laugh. 

“I’d just have you killed.” 
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i^^etective Bill Spradley is an old- 
fashioned cop fighting an old-fashioned war. He joined the LA PD in the 
early seventies and worked Hollywood vice, battling the tide of hookers 
working Sunset and the streets beyond. Work began with roll call at 
three-thirty in the afternoon. Dinner was something bought at McDon- 
ald’s or Pioneer Chicken and eaten out of Styrofoam on the hood of a 
car. Spradley would start by picking up a rental car or an old junker 
from Bundy’s Rent A Wreck, and despite his slim build, mild demeanor, 
and meticulous grooming, he always managed to look the part of a man 
on the make. 

Spradley had a job that might drive some men crazy. Every night it 
was his duty to pick out a prostitute, invite her into his car. get her to 
solicit him, and then, if he was lucky, maneuver the car and his compan- 
ion back to the designated arrest post before she caught on. On a good 
night he’d arrest several girls before his shift ended at 3 a.m. He’d get 
home and to sleep by about four-thirty and then rise about a quarter 
past seven to be ready to testify in court. 

Over the years he d had a number of close calls. Sometimes when a 
prostitute realized he was a cop, she would try to leap from his moving 
car. Other times they'd jam their high heels on the accelerator or reach 
for the keys. The desperate ones would lunge at Spradley and grope for 
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his gun, a particularly v^^ffort since early on he’d learned to sit on 
revolver. 

Until he heard the story in September of 1989, Spradley thought 
he’d seen it all. He gathered it in bits and pieces, never getting the whole 
story from any one prostitute. On street comers, between tricks, they 
told him what they knew. One said the Yellow Pages ad bill wasn’t paid. 
Another said she knew how to get a free phone number. Still another 
said she knew how to get a phone number that would be billed to some- 
body else. 

When Spradley pieced it all together he began to see a pattern. 
Someone in Hollywood could get free Yellow Pages outcall ads. Every- 
body knew somebody who told them it could be done, but try as he 
might, he couldn’t get to that somebody to solve the mystery. 
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“Please state your name and your occupation,” Robert Crowe calmly 
asks. 

"Last name is Von Brauch, first name, Kurt,” the bull-necked former 
cop introduces himself. “Occupation, security investigator for Pacific 
Bell.” 

“The telephone company?” 

Crowe drives home the point. The telephone company itself is on 
the stand. The date is September 6, 1989, and once again Crowe stands 
before a secret grand jury. Under Crowe’s direction Von Brauch pro- 
vides an overview of the evidence taken from Poulsen’s locker and 
condo, everything from pay phones to Pac Bell printouts on the San 
Francisco Soviet consulate, even a 660 communications panel with a 
sticker that states that it contains confidential material that will “bring 
the person into trouble with the federal government.” 

It’s not as dangerous as Von Brauch claims. The 660 is simply a rou- 
tine multiline central office phone, and the stickers are World War II 
memorabilia Kevin bought at a surplus store. But while the govern- 
ment is exaggerating, there’s no doubt that Kevin is playing with fire. 
On what appears to be a page from Kevin’s calendar, Von Brauch found 
what he believes to be a transcription of a private conversation of a Pac 
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Bell investigator who works in the department that wiretaps for the fed- 
eral government. 

“Is it correct to say that when the federal government, usually the 
FBI, obtains a court order for a wiretap, that Pacific Bell, pursuant to a 
contract with the government, actually conducts the wiretap?” Crowe 
asks. 

“Yes, sir.” 

“Does Pacific Bell take certain security precautions to make sure the 
information is not disclosed to the public?” 

"Our lab that performs that type of operation . . . [is] in a locked and 
alarmed facility. They have all papers and court orders maintained per 
government specifications in an approved safe ” 

"Did you discover in Kevin Poulsen’s bedroom papers indicating 
that he had gained access to some of those federal court order wiretaps 
from Pacific Bell offices?” 

“Yes, sir. We found three pieces of paper that . . . call the telephone 
number, the line equipment and cable and pair of the targeted tele- 
phone number.” 

“In this case, do we know what these were involved in?” 

“Yes. The three wiretaps that Mr. Poulsen had intercepted and inter- 
fered with involved the tapping of the telephone of Ferdinand Marcos 
and associates.” 

But there’s an even more startling fact that Von Brauch doesn’t tell 
the grand jury. The Marcos tap was run by the foreign counterintelli- 
gence arm of the FBI. 


“At some point, did Pacific Bell internal security people draw up a 
memorandum regarding Kevin Poulsen's access to Pacific Bell internal 
documents?” 

“Yes, sir, they did.” 

Did you have occasion to find this memorandum during your 
searches of the storage locker or of Poulsen’s apartment?” 

“Yes. sir. I did.” 
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“Did you conduct an inquiry as to how Kevin Poulsen could have en- 
tered these internal Pacific Bell documents?” 

Crowe’s careful phrasing has a purpose. He wants to conjure up the 
image of old-fashioned criminal “breaking and entering,” an act not yet 
equated with mere unauthorized computer “access.” 

“Yes, sir. That document involved the entry into a computer in San 
Ramon. ... I believe the man’s name was Robert Tracy at our San Ramon 
facility, and the contents of the memo indicated that Tracy had discov- 
ered an illegal entry.” 

“Did you have any conversation with Mr. Tracy or Ms. (Gerri) Lyons 
regarding an unusual phone call they received, an inquiry concerning 
this particular memo?” 

“Yes, sir . . . there was an attempt to obtain that particular memo, 
with the person who was calling claiming to be someone else. 

“Who did that person claim to be?” 

“He claimed to be a high-ranking management official at Pacific 
Bell.” 

“Did they also give the correct callback number?" 

“Yes, sir, they did.” 

Von Brauch first explains how he discovered the executive’s phone' 
had been surreptitiously call-forwarded to a pay phone, and then Crowe 
suggests a likely culprit. “Did you find in Poulsen’s apartment, or in the 
storage room, Pacific Bell directories indicating the names of the top- 
ranking Pacific Bell officers, security personnel, and their telephone 
numbers?” 

“Yes, sir." 


Von Brauch mistakes some of Kevin’s junk for wiretapping and military 
equipment. The antique.three-hundred-poundTSPS console suddenly 
“allows an operator to break into calls — "A sixteen-button phone used 
for routine testing is represented as a “military communications sys- 
tem.” A mechanized lube testing trunk test set and a direct access test- 
ing unit, or DATU, enables the hacker to tap “any telephone literally 
within the country.” 
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Unfamiliar with Poulsen’s electronic world, the grand jury needs! 
simple, physical sense of the hacker’s powers, and Von Brauch’s colorful 
descriptions seem to do the trick. “Agent Von Brauch, you have talked 
about a room and called it the switching room. What does the name 
switch room come from?” ,j 

“‘Switch room’ is the term given to telephone switching rooms be 
cause that is basically what they are. They are in a room and they conS 
tain a telephone switch.” . 

“Why did you refer to the room depicted in the photo as the switch 
room?” 

“The sign ‘switch room’ here that you see in the left margin of this 
photograph was attached over the door of the third bedroom of the 
apartment at 1055 Pine Street in Menlo Park.” 

“So, in other words, Poulsen and Lottor ... had placed a sign up there 
saying ‘the switch room’?” 


Crowe impresses upon the grand jury that the most relevant statute for I 
their deliberation will be Section 1029 of Title 18 of the United States 
Code, Fraud and Related Activity in Connection with Access Devices. 
“Access” is the key word, and Crowe asserts that access has been ob- 
tained. 

“Did your investigation come up with evidence whether Poulsen, 
Lottor, and Gilligan had access to various government equipment?". 
Crowe asks Von Brauch. ^ 

“Yes, sir.” 

“Let me show you this document Describe it,” Crowe requests. 

“That is a piece of electronic mail transmission we obtained from 
one of the data tapes that was recovered from Kevin Poulsen . . . mailed 
from Robert Gilligan. ...” 

Von Brauch continues, stating that the mail is evidence Gilligan ac- 
cessed a military network called Masnet. The printout of the network’s 
opening screen, Von Brauch asserts, proves he broke the law. “Under- 
neath that Masnet label is a warning that states, and I will quote it: 'Un- 
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authorized acc£\j the use of this computer system is in v^jon of 
Title 1 8, U.S. Co^e^Section ro3o. Violation will be prosecuted.’ 

“It then goes on to list a menu of ways to enter the system.” 

“Access codes?” Crowe leads his witness. 

“Those are access codes,” agrees Von Brauch, adding, “There is also a 
comment from Mr. Gilligan to Mr. Poulsen that says, ‘Check this out!’” 
The evidence appears solid. Robert Gilligan had allegedly “accessed” 
a government computer and Poulsen allegedly had in his possession the 
valuable access codes. The system banner itself warned that trespassers 
would be charged with a felony. 

“During the course of the investigation did you obtain information 
from Kevin Poulsen as to whether he had accessed any classified mili- 
tary records?” questions Crowe. 

“Yes, sir, I did.” 

“What did you pull off the computer that indicated that?” 

“Are we at liberty to discuss that?" 

“Yes." 
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“I found a detailed air attack task order that involved a military ex- 
ercise of the Eighty-second Airborne Division, which involved all air- 
craft, air transporters plus fighter intercept and attack orders. The tar- 
gets on the fighter interception and attack orders are current targets and 
are currently classified.” 

The allegations are all beginning to tie together. Kevin Poulsen has 
hacked access codes to military computers and obtained something 
that might be of real value to the Soviet consulate on Green Street in 
San Francisco. 
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“Did this particular document indicate it was classified at the secret 
level?” Crowe continues. 

“Yes, sir, every page listed that classification.” 

“Did Poulsen, Lottor, and Gilligan have appropriate clearance to 
have access to those documents?” 

“None of them have ever obtained any level of security clearance,” 
Von Brauch states. 

But Von Brauch is at least partly mistaken. Both Poulsen and Gilli- 
gan had government security clearances. 
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The grand jurors have a few questions for Von Brauch about the moti- 
vations of the hackers’ eavesdropping. “Did you find a specific reason 
why they were doing it? Was it just a prank?” 

The one that was done on the college we believe was an experimen- 
tal type of tap,” Von Brauch begins. ", . . The taps of the family . . . down 
in the North Hollywood area, the one young lady was an ex-girlfriend of 
Kevin s. . . . The third one, which I don’t believe we included here, was 
Molly Ringwald. Apparently he had a fixation with a certain number of 
stars, Janis Quey, Molly Ringwald, and I believe there was a third one.” 

“The equipment that they had,” probes the persistent juror, “is there 
evidence of their using it for their own benefit . . . were (they) selling any 
kind of service with the equipment that they had?" 

It’s a good question, but neither Von Brauch nor any other federal 
witness called before the grand jury has an answer. And some basic 
questions need answering. Ignorant of Poulsen's mastery of SAS, the 
government can only guess at how he’s wiretapping. And there are 
other mysteries. Why had this young man stuffed his apartment with 
swiped and scavenged telephone equipment? Why had he walked 
straight into the phone company’s downtown San Francisco headquar- 
ters to have the run of its security offices? How did he know about the 
federal Marcos spy taps and possess phone records of the Soviet consu- 
late and what appeared to be classified military documents? And, most 
of all, what did he plan to do with all of his secrets and access? 
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